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We discuss quantitatively the complementarity of information transmitted by a quantum system 
. . . prepared in a basis state in one out of several different mutually unbiased bases (MUBs) . We obtain 

0^ I upper bounds on the information available to a receiver who has no knowledge of which MUB was 

. chosen by the sender. These upper bounds imply a complementarity of information encoded via 

' different MUBs and ultimately ensure the security in quantum key distribution protocols. 
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(D ' I. INTRODUCTION 



In this paper we consider communication between a sender, Alice, who prepares a quantum system in a given state 
and a receiver. Bob, who receives the quantum system after its passage through a perfect quantum channel. The 
quantum system is a qudit with a d-dimensional Hilbert space, and if Alice and Bob agree to use a fixed basis for the 
' communication, each quantum system, prepared in one of the basis states, can thus unambiguously encode a message 

rS i' in the form of an integer value between 1 and d. Quantum mechanics offers the possibility to prepare superposition 
states, who can themselves be viewed as basis vectors in a different basis, and from the possibility to use different bases 
' follows a number of properties and possibilities, e.g., to use quantum systems for secure quantum key distribution 

g; QiiiSi. 

p~ |. A large amount of work has been devoted to present security proofs for quantum key distribution [7|, |8|, [01 and 
to characterize other information theoretical properties, such as the channel capacity of a quantum transmission 
channel. It is thus an ongoing effort in quantum information science to investigate and quantify the interplay between 
04 ■ quantum physical properties such as complementarity and uncertainty relations, and information theoretic concepts 
^ such as Shannon entropy and mutual information. In this paper we shall present a number of results concerning 
the information that one or several recipients can obtain about messages sent by a source, Alice, making use of 
d-dimensional quantum systems. We present some rigid results and some related conjectures in the form of upper 
I bounds on the mutual information between the sender and receiver about messages sent with different bases. 
• ■ The paper is organized as follows. In section II, we start with an overview of the problem, and we present the 
^ : notation and assumptions that will be used in the rest of the paper. In section III, we discuss the complementarity 
of the information sent via different mutually unbiased bases (MUBs). First, upper bounds are obtained for the 
, sum of the information about the messages sent via two MUBs with both equal and different prior probabilities on 
IL^ ■ basis states. Next, the case of M MUBs is considered, and upper bounds are derived for both equal and unequal 
prior probabilities. We conjecture that the upper bounds for equal prior probabilities also hold for unequal prior 
probabilities. In section IV, we give a detailed discussion of the two-dimensional (qubit) case, and both analytical 
^ and numerical results are presented. In section V, our results on the complementarity of the information sent via 
different MUBs are used to derive quantitative results that ensure the security of quantum key distribution protocols. 
A conclusion is given in section VI. 
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II. NOTATION AND ASSUMPTIONS 



Suppose that there are M mutually unbiased d-dimensional bases, {|«m)}, with 1 < i < d and 1 < m < M, that 
Alice can choose from in her preparation of a quantum system, and that she will send multiple copies of the quantum 
system prepared in the basis functions for one of these bases. MUBs [l^, UH, [Hi [3 defined by the property that 
the squared overlap between a basis function in one basis and all basis states in the other bases are identical, and 
hence the detection of a particular basis state does not give away any information about the state if it was prepared 
in another basis. 

Ahce chooses, say, the mth MUB {\i,n) |i = 1, • • • ,d}, and prepares the qudit in one of the d basis states according 

, ,1 . 11 (m) / (m) ^ f~, v^d (m) -i \ -r^ • (m) ^ (m) ^ (m) 

to the prior probabilities (p- > 0, i^i^iPl = Ij- ror convenience, we suppose p\ > P2 ^ Pd ■ 

As illustrated in Fig. 1., she sends the qudit, and Bob, who docs not know which basis Alice has chosen, performs 



2 



Pi 



.(1) 









N 






" 









Bob 



FIG. 1: Illustration of transmission of a quantum system between Alice and Bob. Each line indicates Alice's use of one 
particular basis with given basis vector probabilities, and the subsequent POVM detection by Bob, who has no prior knowledge 
of the basis chosen by Alice. 



a measurement on the quantum system. We will assume the most general form for Bob's measurement, i.e., it is 
characterized by positive operator valued measure (POVM) elements {MJ, with > and J2s=i = I- 

We now calculate the amount of information available to Bob about the message, i.e., the basis vector sent by 
Alice, without knowing that Alice has chosen a definite, say, the mth MUB. Let p^^^ denote the probability that Bob 

obtains the result s, conditional on the state sent by Alice. We have p^^^ = {i^l Mg \im}- The joint probability 
that Alice sends the state \im) and Bob obtains the result s is given by 

p^'>=pt^¥:;^=pt^Uim\M,K). (1) 

The total probability that Bob gets a result s is thus given by 

= Y^p^^ = Y.pt'^ {im\ M« . (2) 

1=1 i=l 

Conditioned on the result s obtained by Bob, the probability that the state sent by Alice is {|«m)}! is therefore given 

by 



p^^^ {im\ Ms \lm) 



pI? = P^'/p'-^'i^) = J' t\ ±]. . ■ (3) 



The mth information (the information encoded via the mth MUB) Bob can obtain is given by the mutual information. 
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Im = H{pt"^;^} - ^p('")(s)i?{p(™); z}, (4) 

s=l 

where H{qi; i] denotes the entropy — qi log2 Qi for a probability distribution {qi}- 

Bob can vary his measurement strategy by varying his set of POVM elements. However, he only obtains the 
maximal information encoded via a particular MUB, by choosing the appropriate projection operators on that basis 
and in that case he can obtain no information encoded via a different MUB. We will express this complementarity in 
terms of upper bounds on the sum of information encoded via different MUBs. 



III. UPPER BOUNDS ON INFORMATION ENCODED VIA DIFFERENT MUTUALLY UNBIASED 

BASES 



We first consider the case of two mutually unbiased bases, say, m = 1,2. 

Proposition 1 . // the prior probabilities on basis states in two MUBs are equal pf'^ = p'"p = l/d, the sum of the 
information about messages sent in the two bases, available to an observer who does not know which basis is used, has 
the upper limit 



h+l2< log2 d. 



(5) 
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Proof. Since p^p = = we have H{p'f^] i\ — H{pf^;i\ = logj d. From ^ we also have 



= ixrlMs} =p(s). (6) 
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/i + /2 = 2 log2 d - ^ p(,s) (i/ {pJJ ; 1} + ; z}) . (7) 



Therefore from ^ we have 



Now we use a duahty between measurements and ensembles [T3,li3, and formally define a state ps = Ms/Tr{Ms}. 
Rather than Alice sending a state to Bob, we consider the opposite situation where Bob prepares the qudit in one 
of the states ps according to prior probabilities p{s) = ^TrjMg} and sends the quantum system to Ahce. In this 
reversed picture, Alice may choose one of the MUBs and perform a projective measurement onto this basis. We then 
recognize the sum of the terms inside the bracket in the above equation as the entropic uncertainty for a state ps, 
which is known to have a lower bound [17i] , 

H{p'^^l-i} + H{pf^-i}>\og^d. (8) 

Therefore 

D 

/i + /a < 2 log2 d-Y^ p{s) log2 d = log2 d (9) 

s=l 

which completes the proof of proposition [T] 

It should be pointed out that our proposition[l]can also be derived from inequality (78) in [l^ , where the information 
inequality for the case of two source ensembles with the same ensemble density operator is derived via a more general 
form of the duality, the so-called source duality. The complementarity in the dual problem is referred to as an 
information exclusion relation in p^ . The duality based argument is not applicable when we discuss the following 
general case. 

When the prior probabilities used by Alice to choose the basis state within the MUBs are different, we can prove 
the following weaker upper bounds on the information obtained by Bob about the two bases. 

Proposition 2 . For two qudit MUBs, in which the basis states are chosen according to probabilities pf'\ in 
decreasing order with i — I, d, we can prove that 

h + h < dpmax log2 d. (11) 

Here Pmax ~ max{j)^^\p^^'} is the maximal value over all prior probabilities in both MUBs, and therefore HU\) is 
stronger than Ul]) . 



Proof. For each m (to = 1,2), from the joint probability distribution {p^™ }, we can define two other joint 

m) {m 

s\i ^s\i 



probability distributions {g^™''} and {ql™"^}, by defining the conditional probabilities as g^T^'' = q^"^^ — 



Mg \im) and the prior probabilities as g^™'' = i ^'^'^ '^i™'' ^ 2- then obvious that (7^-™' — ^ 

(1 - 4^)5!™^ and g(™)(s) = ^ti ^f^^i? = l^P^'^''^'^ + - ^^^^^'^^^^ Therefore 
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1 



dp^™'* dp 



< 

dp 



l^)\H{gi-Hs);s}-j2gi-^H{gi;^;s} 
'i I j=i 



-(1- 

dp 



L^H{p^-Hs);s} + il--±^)H{gi-Hs);s} 
'i "Pi 



1=1 

= i?{g^);z}-E'Z<"H-)^^{<^0 (12) 



Here the inequalities follow from the concavity of Shannon entropy. As q^"^^ = ^, the right hand side of the above 
inequality is simply the mutual information via the mth MUB when the prior probabilities are equal. Using proposition 
1, we immediately have ([TU]). 

Conjecture. We have studied the problem numerically and found that when Alice uses different probabilities, the 
inequality (fTO| does not provide a tight bound on the information on the two MUBs obtainable by Bob. In fact, for 
all numerical examples, we find that unequal probabilities lead to lower information than that obtainable with equal 
probabilities, which leads us to suggest as a conjecture, that proposition [1] holds also in the general case. 

Suppose Alice has M MUBs to choose from, the sum of the information available to Bob via M different MUBs is 
given by 

M 

= J2 Irn=J2H{pl'"^;^}-J2Y.P^"'^('WpZ^■,^}■ (13) 

m—l m rn s 

In analogy with our proposition 1, we have the following 



Proposition 3 When Alice has M MUBs to choose from and she transmits the basis states in each MUB with the same 
prior probability, the information ab 
and is restricted by the upper limits, 



prior probability, the information about the message sent via each MUB obtainable by Bob adds to Itot = Sm=i^m' 



Itot = E /™ < Mlog2 ^-{K+1) (m - k'^±^^\ log, (l + < Mlofe '^^^ ^ (M) 

m—l ^ / \ / 

with K = LdTS^rJ. and 

2 



Itot = E - "T d (15) 



which is stronger than ^14\ ) when M < Vd + 1 and weaker than |_?^[ ) otherwise. 

Proof. Since Pj-™'' = we have for the reverted protocol, in which Bob sends the state ps = Afs/Tr{Ms}, that 
p^"^\s) = Tr{Ms}/d = p{s) does not depend on m, and therefore we have a simpler form for /(ot, 



og,d-j2p{s)(j2H{pt^-''}] 

s \m— 1 / 



hot^M\og,d-yp{s)\ . (16) 
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Since the prior probabilities are equal, p 
i when the state ^' 



(m) 



can be viewed as the probability of obtaining a result 



jyj-f- is measured by Alice with projective measurements in the mth MUB. For this dual situation 
p4p follows directly from the entropic uncertainty inequality [20| 



M 



H{p^'>-i} > Mlog2 K+{K + 1)(M-K 



.d + M -1 



log2 ( 1 + ^ ) > Mlog, 



Md 



d + M-1 



(fT5)) follows from the entropic uncertainty inequality [20|, |2l| 



M 



; > ^ loga d. 



(17) 



(18) 



m—l 



This completes the proof of proposition [31 

When d is a power of a prime, it is known that d + 1 MUBs exist. Suppose Alice uses all the d + 1 MUBs, i.e., 
M = d + 1, by expansion of the logarithm, we can show that the quantity on the right hand side of (fH)) lies between 
d — 1 and d, and it is strictly less than d for any d > 2. Hence when d is a power of a prime and M = d + 1, we have 
Itot < d, or equivalently. 



d+l 



< 



< 1. 



(19) 



The average mutual information per basis for the case of equal prior probabilities is less than bit when d is a 
power of a prime and M = d + 1 . 

When the prior probabilities are not equal, we can prove the following weaker results. 

Proposition 4 When Alice has M MUBs to choose from and she transmits the basis states in each MUB with different 
prior probabilities, the information about each MUB obtainable by Bob add to Itot = X]m=i -^"i' restricted by the upper 
limits, 



M 



In 



ra=l "Pi 



< Mlog2 

dp max 
dp max 



-{K- 
M - 



1) M - K- 



d + M -1 



log2 1 + 77 



< 



< 



M 



1) M -K 



d + M-1 



log2 1 + 



Af log. 



d + M-1 
M 



with K — \_ 



Md 



d+M- 



-\, and 



E 



dPi 

hot < dp.. 



(m) 



< Y log2 d, 



M 



(20) 



(21) 



(22) 



(23) 



Here Pmax = max{p\^' ,pY'' , ■ ■ ■ ,pf~^^^}, ([SO]) is stronger than ((2T|) . ((22)) and ([23)) become stronger than ([20)) and 
([2T)) when M < ^/d + 1 and weaker otherwise. The proof is similar to the proof of proposition [2l and proposition [4] 
follows from ([12)) and proposition [Sj 

We have also studied the case of more than two MUBs numerically and as in the case of two MUBs, we find in all 
cases, that the stronger inequality p4p . proven for equal probabilities, is observed also for different probabilities, and 
we hence suggest the following conjecture. 

Conjecture. The sum over all M MUBs of the information about the states sent in each MUB, obtained by any 
general measurement procedure, has the upper limit ()14p . 

To our knowledge, the upper bounds, proven and conjectured above are new results. To arrive at our propositions 
and conjectures, we used results on the lower bound of the entropic uncertainty in a "reverted protocol" . There is 
a rich literature on the entropic uncertainty, and we imagine that our use of the reverted protocol, where Bob sends 
a measurement state to Alice, who performs projective measurements, may be useful to obtain further connections 
between entropic uncertainty in one protocol and the available information encoded via different bases in the other. 
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IV. SPECIAL RESULTS FOR QUBITS 



Let us now consider the special, but very important, case of a qubit (d = 2), for which we have 3 mutuaUy unbiased 
bases, corresponding, e.g., to the three pairs of eigenstates of the X, Y, and Z spin components of a spin 1/2 particle, 
or to polarization states of a photon, linearly polarized along (0°,90°) or along (45°, 135°) directions or circularly 
polarized, in the plane orthogonal to the direction of propagation. 

The following corollary follows directly from propositions [3] and 2] as a special case. 

Corollary 5 . (a) When the prior probabilities are equal, the information available on the messages sent by a qubit 
in three MUBs obeys the inequality 

h+l2 + h<l- (24) 

(b) When the prior probabilities are not equal, the following inequalities apply (where we recall that the probabilities 
are ordered and p^-^^^"^ is the largest probability within the mth basis), 



h h h 

O (1) O (2) + r, (3) 

2p\ 2p\ 2p\ 



< 1, (25) 



h+h+h < 2p^ax. (26) 



„ r (1) (2) (3)i 

Here p,nax = max{pl ,Pi ,Pi } 



For the case of equal prior probabilities, (|24|) is closely related to the result of the dual problem in [T^ (eq. (9)) via 
a "reverted protocol" . 

It is an interesting observation, that restrictions within the measurements available to Bob, affect the results, and, 
e.g., if Bob is restricted to perform measurements with only two outcomes, we can prove that the tighter inequality 
([M)) holds for the case of unequal probabilities, p^^'"'' = (1 + (5„i)/2, ^2'"'' — (1 ~ ^m)/2, chosen by Alice. To prove this, 
we suppose without loss of generality that the three MUBs are given by the eigenstates of ax, a-y and cr^. Bob's two 

measurement elements are denoted by M± — ^((1 ± i?o)-^ ± R ■ ~a), where |i?o| + < 1 as M± > {R = \R\)- Using 
the expansion ln(l + a) = — ^1 < 5; Ij we get from a direct calculation 



)i?f-li?2»-2''^+l(l-52«-2fe) 



oc /n—1 71—1 

n=l ^ ' \fe=0 fe=l 

°° 1 / ;?2 o d2 r, \ 

^ E ^^^^ i E( 2fc X^^"-" + S E( 2fc 1 )l^o|--i^---- (27) 

n=l ^ ' \ k=0 k=l / 

d2 °° 1 

= i# E 2n(2n - 1) + " " 2n\Ro\'-'R) 

r2 °o 1 n2 

< il£V = = :^ln2 

- i?2 2n(2n - 1) R^ 



Similar inequalities hold for ly and Iz, so we immediately get + + < 1- 

A numeric search has been performed for over 300 million cases. For each case the probability distributions for the 
X, Y and Z basis states are randomly generated, and Bob's measurement protocol is also randomly generated with 2 
to 16 rank-one POVM elements. Fig. 2 shows the values attained by the sum Ii + I2 + h- The prior probabilities 
used by Alice are not equal, and the data are organized horizontally according to the largest probability Pmax- This 
extensive numeric search supports the conjecture that the tighter upper bound (|24p holds in the general case. The 
figure also shows that when Bob uses only rank-one POVM elements for the measurement, there is a non-trivial lower 
bound for the information for each fixed Pmax [121 (for equal probabilities, in the left side of the plot, this minimum 
information Itot = 0.768 is obtained by measuring the spin along the direction (1, 1, 1), when Alice uses the MUBs 
along the X, Y and Z axes, in agreement with (26) in ^23|]) and (23) in [23 |. 
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FIG. 2: The shaded region indicates the values attained by the sum h + I2 + I3, obtained by general POVM measurements 
with 2 to 16 rank-one members Ms. The region is identified by randomly choosing the prior probabilities for the X, Y and Z 
basis states and randomly simulating the measurements {pmax is used as coordinate axis in the plot). 



V. COMPLEMENTARITY OF INFORMATION AVAILABLE TO DIFFERENT OBSERVERS VIA 

DIFFERENT MUBS: SECURITY IN QKD 

The information upper bounds proven above have applications to quantum key distribution, since they limit the 
information available to a potential eavesdropper about the communication shared between the legal users, Alice and 
Bob, of a transmission channel. 



A. BB84 protocol 



We consider first the BB84 protocol [H as an example. Assume, that in her implementation of the BB84 protocol, 
Alice chooses either the Z or the X basis, and that she prepares her qubit in one of two basis states in either basis 
with equal probability, before sending it to Bob. 

An eavesdropper, Eve, may intercept the qubit before it reaches Bob. However, the most general action of the 
receiver Bob and an eavesdropper, Eve, is accounted for by describing them as a single, joint receiver, capable of 
carrying out general measurements on the states sent by Alice (Fig. 3). With this description, viewing Bob and Eve 
together as a single observer, BE, who performs measurements assuming no knowledge of which basis is used by Alice, 
the inequalities discussed above can be used directly. 

From proposition 1, we know psj ] 

I^{A : BE) + 4(A : BE) < 1 (28) 

where Iz(x) (^ ■ BE) is the information that Bob and Eve obtains about Alice's transmission in the Z (X) basis, without 
knowing which basis is used by Alice. Since the mutual information cannot increase if we discard a subsystem, we 
have, 

IM-BE) > IM-B) (29) 
I^iA-.BE) > LiA:E). (30) 

So it follows that 



IM-B)+UA:E)<1, (31) 

and similarly we have 

Ix{A:B)+I,iA:E)<l. (32) 

Even with a "helpful" Bob, who cooperates with Eve to let her extract the maximally allowed ^-information {X- 
information), while he reserves the AT-information (Z-information) for himself, the sum of these amounts of mutual 
information obeys our simple upper bound. Therefore by checking the amount of information sent through one axis 
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FIG. 3: Illustration of complementarity of information available to different observers via different MUBs. In the two-receiver 
scheme (BB84 protocol), the X information obtained by Eve decreases the available Z information for Bob. In the three-receiver 
scheme, Eve's information obtained about one basis and Fred's information obtained about another MUB both decrease the 
available information for Bob about the third MUB. 



Alice and Bob can determine the maximum information available to a hypothetical Eve, intercepting the information 
via the other axis. By checking via both axes for a given amount of test qubits, they can thus ascertain a maximum 
level of eavesdropping on the channel and apply privacy amplification to enable fully confident transmission. It is 
often explained how the security of QKD is due to the complementarity of information sent through different MUBs, 
and the present analysis shows this quantitatively. 



B. Six state protocol 



We extend the BB84 protocol to the case where Alice chooses between three qubit bases, Z, X or Y, and prepares 
the qubit in one of two basis states of her chosen basis with equal prior probability. To investigate the possibilities 
of eavesdropping on this six-state protocol [3, [H], we consider now three receivers: Bob, Eve and Fred, where the 
eavesdroppers Eve and Fred could be one and the same person (Fig. 3). Treating first Bob, Eve and Fred as a 
single receiver, capable of performing the most general measurements on the quantum system, and noting again that 
information does not increase upon discarding subsystems, from corollary [5l we get 

UA:B)+Iy{A:E)+I,{A:F)<l. (33) 

Eve's attempt to acquire y-information and Fred's attempt to acquire Z-information will add up to the decrease in 
the available X-information for Bob. 



C. Larger dimensional protocols 

Similar inequalities can be obtained when Alice sends qudits to Bob instead of qubits. Apart from being interesting 
in its own right, we note that this may constitute a useful starting point for the analysis of upper bounds of the 
information available by collective attacks (on several subsequently emitted qubits) on the BB84 and the 6-state 
protocols. 



VI. CONCLUSION 



In conclusion, we have quantitatively investigated the complementarity of information obtainable via different 
mutually unbiased bases (MUBs), when the sender, Alice, has more than one MUB at her disposal to encode her 
messages and the receiver, Bob, has no prior knowledge of her choice of basis. We obtain various upper bounds on 
the sum of information available to Bob encoded by Alice via M different MUBs. 

We prove that the sum of Bob's available information encoded via two different MUBs has an upper bound of 
log2 d when the prior probabilities of Alice's messages are all equal to l/d for each MUB. We also prove weaker upper 
bounds for the case of non-equal prior probabilities. We give and prove upper bounds of the sum of Bob's available 
information encoded via M MUBs when the prior probabilities of Alice's messages are all equal to 1/d. Weaker upper 
bounds for the general case of non-equal prior probabilities are also obtained and proved. Numerical searches indicate 
that the tighter upper bounds proven for equal probabilities also apply in the general case of unequal probabilities 
used by Alice, but only for qubits and under a restriction on the measurements available to Bob, we have found rigid 
proof of such a conjecture. 
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Using the complementarity of information sent via different MUBs, we derive quantitative inequalities to show 
that there is also a complementarity of the information obtainable by different observers, when each of them tries 
to gain information encoded via a different MUB. This latter complementarity is the essence of the security of QKD 
protocols: the eavesdropper's knowledge of the information sent via one MUB inevitably decreases the information 
sent to another observer via another MUB. 
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